ScanMalware.com

Security Scan Report: www.garfo.ru

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7bfe311a-d079-40e7-bccf-caa05525579cDomain and IP registration (RDAP)/api/v1/rdap/7bfe311a-d079-40e7-bccf-caa05525579cHow often this domain was scanned/api/v1/domain/stats/garfo.ruScan history for this domain/api/v1/domain/history/garfo.ru?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 9 HTTP transactions. The main domain is garfo.ru.

Submitted URL: https://www.garfo.ru

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Bare ISPmanager-style hosting panel login on garfo.ru. No malware, phishing, impersonation or exfiltration signals found; unknown age and unranked status are weak priors, so verdict stays moderate. Access only if you own this account.

Risk Factors (2)
Credential-collecting login form on a domain with no published age or reputation and no visible site identity beyond the panel software
Page presents almost no content (no company/about/contact context) around the login, so the operator cannot be independently confirmed
Safety Factors (6)
No Indicators of Compromise or threat-intelligence matches
No JavaScript malware (hunting rule) patterns and no malicious kit-roster match
No network IDS alerts
Form submits to the same registered domain (/ispmgr); no cross-origin submission or credential exfiltration
Single password field with a matching username field — normal for a hosting control-panel login
All JavaScript served from the site's own domain; no third-party script hosts
Domain age information unavailable

Details

Page Title

Authorization

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.garfo.ru' on the Russian country-code top-level domain (.ru) with subdomain 'www'. The registrable portion 'garfo' spans 5 characters with 2 vowels and 3 consonants. Word splitting yields 2 words: gar, fo. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Authorization IsP manager Password [ Theme Language a ‘ad Video tutorial ©SPmanager-Lite

Page Load Overview

1.01s
Total Load Time
39 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:263 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
65%
documentation technical
41%
adult content
39%
phishing/scam
20%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
95.101.115.164Jõhvi, Ida-Virumaa, Estonia
AS198068Cloud.dog Ou
91--

Detected Technologies1

PasswordField
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T165A1554451888D3E405F45CA85B22E9C55FD833AC6009C8CEE646BFB9357E69CA37BBC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Lk9/24ZGufAhhWWAzOODDdyz0zZvUiYfM5CvyAH8JMTcv2k4ZbwgwsUm/EWRaHSG:o9/20CbODR20Qxvq2kkxwbm/Z5nG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4679:APCRChgCAKmgIIEgCFCIAMAoAApEAABADFCAFQAAiFABQAEEBgABRgAAQBAFEQBgAAQCAEBDAAHgJRUyAAB2QQFAYwKgAAEg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7ffff
Perceptual Hash:a366cc99336666cc
Difference Hash:08000c0c0c080000
Wavelet Hash:3c3c2424e4e4fcfc
Color Hash:N/A

Other Hashes

Crop Resistant:08000c0c0c080000

Scan History

Scan history not available

Unable to load historical scan data